Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: How About Those Users That Can NOT Get Patches For Meltdown & Spectre?

4 Weeks Ago   #1
montecarlo87

Windows 7 Pro SP1 x64 & Windows 10 Pro
 
 
How About Those Users That Can NOT Get Patches For Meltdown & Spectre?

Hello. I have a serious dilemma! We all have heard about the two critical vulnerabilities were discovered in modern processors named “Meltdown” and “Spectre,” these processor chip vulnerabilities are found on personal computers, mobile devices, and in the cloud.

Now, my Lenovo ThinkPad T510 laptop PC that to this day runs great therefore I have no issues with it. I have no plans on upgrading to a new laptop. I have Windows 7 Pro SP1 installed and I was even figuring soon on upgrading my operating system to Windows 10 Pro ON THIS VERY PC!!!

So after hearing these two (2) critical vulnerabilities I checked with both Lenovo and Intel to see if there was a patch to update to secure my PC from these two (2) threats. I discovered NOT. Intel defers me to Lenovo as they are the maker and control the updates and such. I just discovered my PC was just outside the mainstream/extended support updates late this past year and now deemed EOL (End of Life).

So without these important patches for my PC, I am now vulnerable with this PC! What can I do in order to assure malicious hackers using these two (2) design flaws do not compromise my PC without the patch fix(es)??? A good explanation is needed, please!

All I read online is “determine one’s vulnerabilities with running various tools” (I have done and found I am vulnerable.) and “how to patch instructions” one’s PC when I Google search for those with computers who can be affected by hackers for these two (2) threats, BUT EXCLUDES resources online for MANY of those computer users who will NOT be able to acquire patch(es) -- what to do???????????????????? (There has to be out of the box geek thinkers out there when it comes to this BIG issue!!!)

Also -- Any other third party software programs (free/paid) that would protect me to the SAME (or BETTER) degree of protection and reliability as the missing patch(es) or not???

Please reply.
Thanks!!!


My System SpecsSystem Spec
.
4 Weeks Ago   #2
Anak

Microsoft Community Contributor Award Recipient

Win 7 Home Premium 64bit Ver 6.1.7600 Build 7601 - SP1
 
 

Hi, montecarlo87,

I'm in the same boat as you. I have a 7year old Gateway DX4831-01e that is EOL and it to runs like a champ, all I can do for now is apply the recent patches that WU (windows update) sends me for the meltdown part of the Intel problem.

Here's what you need to understand:
  • Meltdown is being handled by MS (Microsoft) and WU.
  • Spectre is being handled by the OEM of each individual user(s) machine(s) because it involves the Intel ME (management engine) and WU can't touch that.
How do you handle your windows updates, have you seen either KB4056894 or KB4056897? You can apply either one to harden your machine. Make sure your OS, AV and browser is up to date.

The one item that I haven't heard anything at all about is; What about all those brand new machines that are sitting in the big box stores that unsuspecting buyers will purchase, are they being alerted before they buy? I could just imagine the drop in sales.
In my opinion they should all be sent back to the OEM to apply the patches, but I'll bet you'll never see that happen.

I'm also waiting for those geek thinkers to come up with an answer, if I hear of anything I'll let you know.
My System SpecsSystem Spec
4 Weeks Ago   #3
itconcerned

Windows 7 Ultimate 64 bit / Linux Mint 18.3 MATE-VM
 
 

Hi all,
Plus one in the boat.
Intel® Core™2 Quad CPU Q8200 @ 2.33GHz × 4
Windows,VMware and Linux Mint 18.3 got updates at software level and Mint gave Intel microcode update also as driver on its Driver Manager tool, it is easy and straightforward and it just required a reboot (a rare thing to happen on Linux distros).
As this weird situation goes on, I will change Windows 7 to guest and Mint as host because my old PC is still in a real good shape for my needs. Windows 10, no way unless its behavior changes up to W7 EOL.
My System SpecsSystem Spec
.

4 Weeks Ago   #4
Lady Fitzgerald

Win 7 Ultimate 64 bit
 
 

Quote   Quote: Originally Posted by itconcerned View Post
...Windows 10, no way unless its behavior changes up to W7 EOL.
Even if Win 10 changes to something acceptable before Win 7's EOL, I still won't downgrade to Win 10. I just don't trust Microsoft anymore.

I'm also in the same boat for now, having a Sandybridge-E rig. I'm building a case for a Haswell-E machine (already have the board and CPU) and the board was one of the last ones Asus finally issued a BIOS update for. I don't like any of the boards since Haswell.

In have three perfectly good notebooks that there probably will be no updates for. I'm seriously considering suing Lenovo if they don't come up with one.
My System SpecsSystem Spec
4 Weeks Ago   #5
Loki

Windows 7 Ultimate x64
 
 

Hi,

This is a total failure by Intel. I see no reason that Intel cannot provide the fix for their processors to Microsoft, to be pushed out to windows machines by Microsoft update just like other hardware drivers. It's not like the OEM is making the patch, they get it from Intel. How many normal users can even find the right site at their OEM to get the patch or know to look for it?

Someone should start a class action law suit against Intel if they don't some how get a widespread and easily available patch to the public. And referring you to your OEM is not the solution.

My rant for the Day

So glad I'm running AMD...

Loki
My System SpecsSystem Spec
4 Weeks Ago   #6
Cr00zng

Windows 7 64-bit, Windows 8.1 64-bit, OSX El Capitan, Windows 10 (VMware)
 
 

Quote   Quote: Originally Posted by Anak View Post
Hi, montecarlo87,

I'm in the same boat as you. I have a 7year old Gateway DX4831-01e that is EOL and it to runs like a champ, all I can do for now is apply the recent patches that WU (windows update) sends me for the meltdown part of the Intel problem.

Here's what you need to understand:
  • Meltdown is being handled by MS (Microsoft) and WU.
  • Spectre is being handled by the OEM of each individual user(s) machine(s) because it involves the Intel ME (management engine) and WU can't touch that.
How do you handle your windows updates, have you seen either KB4056894 or KB4056897? You can apply either one to harden your machine. Make sure your OS, AV and browser is up to date.

The one item that I haven't heard anything at all about is; What about all those brand new machines that are sitting in the big box stores that unsuspecting buyers will purchase, are they being alerted before they buy? I could just imagine the drop in sales.
In my opinion they should all be sent back to the OEM to apply the patches, but I'll bet you'll never see that happen.

I'm also waiting for those geek thinkers to come up with an answer, if I hear of anything I'll let you know.
Good summary about Meltdown and Spectre, thanks Anak...

You can test, if your system has been patched:

How About Those Users That Can NOT Get Patches For Meltdown & Spectre?-inspectre.jpg

My Ivy based system did receive MS update, but Intel is still dragging its feet...

Download the app here:

GRC

It didn't take Steve Gibson long to release this app, that does not require installation. Intel and AMD had over six month and they are still not ready with the patches for older system. And for business reasons ($$$), they'll probably never will...


My System SpecsSystem Spec
4 Weeks Ago   #7
Anak

Microsoft Community Contributor Award Recipient

Win 7 Home Premium 64bit Ver 6.1.7600 Build 7601 - SP1
 
 

You're welcome, thank you for the rep!

I'd like to add a caveat to one of my earlier statements:
Quote:
Spectre is being handled by the OEM of each individual user(s) machine(s) because it involves the Intel ME (management engine) and WU can't touch that.
I'm seeing grumblings that WU could do the spectre updates but, MS and WU would have to work together with Intel and their code to receive the patches, so far Intel is reluctant to reveal their code and don't forget the OEM's, and how they along with Intel massage the Intel code to suit the individual aims of the OEM's.

It would be: MS + Intel + OEM's working together to achieve a fix that wouldn't greatly impact the consumer, but I'm not going to hold my breath because corporate pride would invariably get in the way.

I ran the InSpectre tool and had the same results as you.
My System SpecsSystem Spec
4 Weeks Ago   #8
Lady Fitzgerald

Win 7 Ultimate 64 bit
 
 

Quote   Quote: Originally Posted by Anak View Post
You're welcome, thank you for the rep!

I'd like to add a caveat to one of my earlier statements:
I'm seeing grumblings that WU could do the spectre updates but, MS and WU would have to work together with Intel and their code to receive the patches, so far Intel is reluctant to reveal their code and don't forget the OEM's, and how they along with Intel massage the Intel code to suit the individual aims of the OEM's.

It would be: MS + Intel + OEM's working together to achieve a fix that wouldn't greatly impact the consumer, but I'm not going to hold my breath because corporate pride would invariably get in the way.

I ran the InSpectre tool and had the same results as you.
More like corporate greed.
My System SpecsSystem Spec
4 Weeks Ago   #9
Anak

Microsoft Community Contributor Award Recipient

Win 7 Home Premium 64bit Ver 6.1.7600 Build 7601 - SP1
 
 

You forgot avarice, but I try to remain neutral.
My System SpecsSystem Spec
4 Weeks Ago   #10
Lady Fitzgerald

Win 7 Ultimate 64 bit
 
 

Quote   Quote: Originally Posted by Anak View Post
You forgot avarice, but I try to remain neutral.
According to my Webster's Thesaurus (and yes, it is a dinosaur...sorta), avarice and greed are synonyms of each other.
My System SpecsSystem Spec
Reply

 How About Those Users That Can NOT Get Patches For Meltdown & Spectre?




Thread Tools




Similar help and support threads
Thread Forum
Understanding performance impact of Spectre and Meltdown mitigations
Source: Understanding the performance impact of Spectre and Meltdown mitigations on Windows Systems Microsoft Secure
News
An Update on AMD Processor Security for Spectre and Meltdown
Source: AMD Processor Security | AMD See also: Windows operating system security update block for some AMD based devices | Microsoft Support
News
Spectre and Meltdown a problem for Windows 7 ?
Any info would be appreciated . I have 64 bit Dell and HP PCs . Should I turn off auto updating ? Cheers and thanks in advance .
Windows Updates & Activation
Protect your Windows devices against Spectre and Meltdown
Read more: https://support.microsoft.com/en-us/help/4073757/protect-your-devices-against-spectre-meltdown
News


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 06:10.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App